I have the same configuration, except I use wccp/gre tunnel. Port 80 requests work but 443 don't. I am not sure if this is right, but even though data was received on wccp, no data was transmitted back over wccp. Is this expected behavior? If not, what do I do to make response go over wccp? my iptable config look like this iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 80 -j DNAT --to 192.168.5.81:3228 iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 443 -j DNAT --to 192.168.5.81:3229 and squid.conf wccp2_service dynamic 90 wccp2_service_info 90 protocol=tcp priority=240 ports=80,443 On Tue, Jan 1, 2013 at 2:08 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > On 1/01/2013 7:19 p.m., Swapneel Patnekar wrote: >> >> Eliezer & Amos, >> >> Thank you for your input & assistance. >> >> The iptables rules are on the same machine in which I'm running squid. >> >> Amos, just for my understanding changing the below given directive >> should do the trick ? >> >> ssl_bump client-first all >> >> to >> >> ssl_bump server-first all > > > As far as I am aware at this stage yes. > > Amos